In the Claims 

1 . (Currently amended) A method for providing, in a service provider's network, 
a multicast capability for a customer packet of a virtual private LAN service, comprising: 

assigning the virtual private LAN service an Internet Protocol (IP) multicast 
group address in a private domain of the service provider's network; 

at a provider edge device associated with the virtual private LAN service, 
encapsulating the customer packet of the virtual private LAN service in an IP packet 
designating the IP multicast group address and including an Ethernet header 
designating a multicast Ethernet address associated with the IP multicast group 
address ; 

transmitting the IP packet over the service provider's network using an IP 
multicast routing protocol from the provider edge device to a plurality of other 
provider edge devices associated with the virtual private LAN service; and 

at each of the other provider edge devices associated with the virtual private 
LAN service, upon receiving the IP packet, recovering the customer packet. 

2-4. (Canceled) 

5. (Previously presented) The method as in claim 1 , wherein the Internet Protocol 
multicast group address associated with the virtual private LAN service is selected from a 
range set aside by the service provider for use with virtual private LAN services. 
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6. (Original) The method as in claim 5, wherein the range set aside by the service 
provider is selected from a range having an administrative scope local to the service 
provider's network. 

7. (Previously presented) The method as in claim 1 , further comprising 
distributing the Internet Protocol multicast group address using a name server. 

8. (Canceled). 

9. (Previously presented) The method as in claim 1, wherein the IP multicast 
routing protocol comprises a source-based routing protocol. 

10. (Previously presented) The method as in claim 1, wherein the IP multicast 
routing protocol comprises a core-based routing protocol. 

1 1 . (Previously presented) The method as in claim 1 , wherein the IP multicast 
routing protocol creates a distribution tree for distributing the IP encapsulated customer 
packet for the virtual private LAN service. 

12. (Previously presented) The method as in claim 1, further comprising providing 
the virtual private LAN service in the service provider's network using an Internet 
Protocol/Multi-protocol label switching service. 

13. (Original) The method as in claim 1, wherein the service provider provides the 
virtual private LAN service in the context of a Layer 2 virtual private network. 

14. (Previously presented) The method as in claim 1, further comprising receiving 
the customer packet at the provider edge device originating from a customer edge device of a 
virtual LAN. 
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15. (Original) The method as in claim 1 , further comprising accepting into the 
service provider's network an IP packet for the virtual private LAN service only from the 
provider edge devices associated with the virtual private LAN service. 

16. (Currently amended) The method as in claim 1, further comprising, at each of 
the other provider edge devices, forwarding the customer packet to a customer edge device of 
[[a]] the virtual private LAN service . 

1 7. (Currently amended) A system for providing a customer packet multicast 
capability in a virtual private LAN service implemented on a service provider's network, 
comprising: 

a first provider edge devic e s device associated with the virtual private LAN 
service adapted to encapsulate the customer packet of the virtual private LAN service 
in an Internet Protocol (IP) packet designating an IP multicast group address assigned 
to the virtual private LAN service and including an Ethernet header designating a 
multicast Ethernet address associated with the IP multicast group address , the first 
provider edge device including a transmitter for transmitting over the service 
provider's network the IP packet using an IP multicast routing protocol; and 

a second provider edge device associated with the virtual private LAN service, 
including a receiver for receiving the IP packet from the service provider's network, 
the second provider edge device being adapted to recover the customer packet upon 
receiving the provid e r edge IP packet. 

18-20. (Canceled) 
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21 . (Previously presented) The system as in claim 17, wherein the Internet 
Protocol multicast group address associated with the virtual private LAN service is selected 
from a range set aside by the service provider for use with virtual private LAN services. 

22. (Original) The system as in claim 21 , wherein the range set aside by the service 
provider is selected from a range having an administrative scope local to the service 
provider's network. 

23. (Previously presented) The system as in claim 17, further comprising a name 
server for resolving the Internet Protocol multicast group address within the service provider's 
network. 

24. (Canceled) 

25. (Previously presented) The system as in claim 17, wherein the IP multicast 
routing protocol comprises a source-based routing protocol. 

26. (Previously presented) The system as in claim 17, wherein the IP multicast 
routing protocol comprises a core-based routing protocol. 

27. (Previously presented) The system as in claim 17, wherein the IP multicast 
routing protocol creates a distribution tree for the virtual private LAN service. 

28. (Previously presented) The system as in claim 17, wherein the virtual private 
LAN service in the service provider's network implements an Internet Protocol/Multi- 
protocol label switching service. 

29. (Previously presented) The system as in claim 17, wherein the virtual private 
LAN service implements a Layer 2 virtual private network. 
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30. (Currently amended) The system as in claim 17, wherein the first provider 
edge device comprises an interface to a customer edge device of [[a]] the virtual private LAN 
service from which the customer packet is received. 

3 1 . (Previously presented) The system as in claim 17, further comprising an access 
control mechanism in the service provider's network that accepts an IP packet for the virtual 
private LAN service only from provider edge devices associated with the virtual private LAN 
service. 

32. (Original) The system as in claim 17, wherein the second provider edge device 
includes an interface to a customer edge device over which the second provider edge device 
forwards the customer packet. 

33. (Currently amended) An edge device comprising: 
a first port; 

a second port; and 

a routing engine that (a) (i) encapsulates a customer packet of a virtual private 
LAN service received at the first port in an IP packet designating an IP multicast 
group address associated with the virtual private LAN service and including an 
Ethernet header designating a multicast Ethernet address associated with the IP 
multicast group address and (u) provides the IP encapsulated customer packet to the 
second port for transmitting; and (b) recovers a customer packet of the virtual private 
LAN service that was encapsulated in an IP encapsulated customer packet received at 
the second port and designating an IP multicast group address associated with the 
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virtual private LAN service and provides the recovered customer packet to the first 
port for transmitting. 

34. (Previously presented) The edge device of Claim 33, wherein the Internet 
Protocol multicast group address associated with the virtual private LAN service is selected 
from a range set aside for use with virtual private LAN services. 

35. (Previously presented) The edge device of Claim 34, wherein the range is 
selected from a range having an administrative scope local to a service provider's network. 

36. (Currently amended) The edge device of Claim 33, wherein the routing engine 
is adapted to receive [[the]] an association between the virtual private LAN service and the 
Internet Protocol IP multicast group address from a name server. 

37. (Currently amended) The edge device of Claim 33, wherein the IP packet is 
routed using an IP multicast routing protocol , which comprises a source-based routing 
protocol. 

38. (Currently amended) The edge device of Claim 33, wherein the IP packet is 
routed using an IP multicast routing protocol , which comprises a core-based routing protocol. 

39. (Currently amended) The edge device of Claim 33, wherein the IP packet is 
routed using an IP multicast routing protocol , which creates a distribution tree for distributing 
the IP encapsulated customer packets for the virtual private LAN service. 

40. (Previously presented) The edge device of Claim 33, wherein the IP 
encapsulated customer packets comprise an Internet Protocol/Multi-protocol label switching 
service. 
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41 . (Previously presented) The edge device of Claim 33, wherein the edge device 
is adapted to provide the virtual private LAN service in the context of a Layer 2 virtual private 
network. 

42. (Withdrawn) The edge device of Claim 33, wherein the routing engine is 
adapted to enforce an access control list at the first port to deny routing packets not associated 
with an approved virtual private LAN service. 

43. (Currently amended) An edge device comprising: 
a first port for connecting to a first network ; 

a second port for connecting to a second network ; and 

means for routing that (a)(i) encapsulates a customer packet of [[the]] a virtual 
private LAN service received at the first port in an IP packet designating an IP 
multicast group address associated with the virtual private LAN service and including 
an Ethernet header designating a multicast Ethernet address associated with the IP 
multicast group address and (n) provides the IP encapsulated customer packet to the 
second port for transmitting; and (b) recovers a customer packet of the virtual private 
LAN service encapsulated in an IP encapsulated customer packet received at the 
second port and designating the an IP multicast group address associated with the 
virtual private LAN service and provides the recovered customer packet to the first 
port for transmitting. 

44. (Currently amended) The edge device of Claim 43, wherein the IP Intern e t 
Protocol multicast group address associated with the virtual private LAN service is selected 
from a range set aside for use with virtual private LAN services. 
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45. (Previously presented) The edge device of Claim 44, wherein the range set 
aside is selected from a range having an administrative scope local to a service provider's 
network. 

46. (Currently amended) The edge device of Claim 43, wherein the means for 
routing receives [[the]] an association between the virtual private LAN service and the IP 
Int e rn e t Protocol multicast group address from a name server. 

47. (Currently amended) The edge device of Claim 43, wherein the IP packet is 
routed using an IP multicast routing protoco l which comprises a source-based routing 
protocol. 

48. (Currently amended) The edge device of Claim 43, wherein the IP packet is 
routed using an IP multicast routing protoco l which comprises a core-based routing protocol 

49. (Previously presented) The edge device of Claim 43, wherein the IP packet is 
routed using an IP multicast routing protoco l which creates a distribution tree for distributing 
the IP encapsulated customer packets for the virtual private LAN service. 

50. (Previously presented) The edge device of Claim 43, wherein the IP 
encapsulated customer packets are distributed in the second network using an Internet 
Protocol/Multi-protocol label switching service. 

5 1 . (Currently amended) The edge device of Claim 43, wherein the edge device is 
adapted to provide the virtual private LAN service in the context of a Layer 2 virtual private 
network. 
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52. (Withdrawn) The edge device of Claim 43, wherein the means for routing 
enforces an access control list at the first port to deny routing packets not associated with an 
approved virtual private LAN service. 

53 . (Currently amended) A method to be performed in an edge device, the method 
comprising: 

encapsulating a customer packet of a virtual private LAN service in an internet 
protocol (IP) packet designating an IP multicast group address that has been associated 
with the virtual private LAN service and including an Ethernet header designating a 
multicast Ethernet address associated with the IP multicast group address ; and 

transmitting to the IP encapsulated customer packets. 

54. (Previously presented) A method as in Claim 53, further comprising: 

receiving an IP encapsulated customer packet designating the IP multicast 
group address; 

recovering the customer packet from the IP encapsulated customer packet; and 
transmitting the customer packet. 

55. (Previously presented) The method of Claim 53, wherein the Internet Protocol 
multicast group address associated with the virtual private LAN service is selected from a 
range or use with virtual private LAN services. 

56. (Previously presented) The method of Claim 55, wherein the range is selected 
from a range having an administrative scope local to a service provider's network. 



-10- 



SerialNo. 10/632,484 



57. (Currently amended) The method of Claim 53, further comprising receiving 
[[the]] an association between the virtual private LAN service and the Internet Protocol 
multicast group address from a name server. 

58. (Currently amended) The method of Claim 53, wherein the IP packet is routed 
using an IP multicast routing protocol , which comprises a source-based routing protocol. 

59. (Currently amended) The method of Claim 53, wherein the IP packet is routed 
using an IP multicast routing protocol , which comprises a core-based routing protocol. 

60. (Currently amended) The method of Claim 53, wherein the IP packet is routed 
using an IP multicast routing protoco l which creates a distribution tree for distributing the IP 
encapsulated customer packets for the virtual private LAN service. 

61 . (Previously presented) The method of Claim 53, wherein the IP encapsulated 
customer packets use an Internet Protocol/Multi-protocol label switching service. 

62. (Previously presented) The method of Claim 53, wherein the virtual private 
LAN service is in the context of a Layer 2 virtual private network. 

63. (Withdrawn) The method of Claim 53, further comprising enforcing an access 
control list to deny routing packets not associated with an approved virtual private LAN 
service. 
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